1. Parties and written mandate
Provider: Sebastian Gonzalez, an individual operating SLP Nova, SLP Nova · 4125 Hastings Street, Burnaby, BC V5C 2J3, Canada, notices hello@slpnova.com. The customer/provider, address, authorized signatory, account and privacy contact are identified in the acceptance record, which is part of this addendum. It supplements the Terms, Privacy, Subprocessors and Retention versions recorded there. Personal acceptance without authority does not bind an institution.
The written mandate is limited to private workspace/minimum profiles/goals/sessions/evidence, consented audio, transcription/speaker review, clinician-reviewed AI report drafts/planning, secure support, security, export/return and deletion. Subjects are minor patients, caregivers/participants and professionals; information is minimum clinical context, voices, transcripts and associated reports. It lasts while services or justified protected residual copies exist; confidentiality survives.
2. Complimentary Pro
Pro is complimentary, separate from the 14-day public trial. Actual grant dates/values are in the grant and acceptance record. Default review is at day 60, with notices 14 and 3 days before review and 30 days' notice before ending. The configured dates and periods disclosed in your acceptance record govern your grant; ending cannot occur before its required notice period is completed. No card, auto-conversion, charge or deletion follows ending access. Retained records remain viewable/exportable under independent audio/deletion rules. No posting or endorsement is required. A future purchase requires separate informed price/renewal/refund disclosure and express consent. Grants are excluded from revenue and have paid-level safeguards and rights.
3. Patients, authority and official records
Real use occurs only in the enabled workflow after required agreements, valid child representation, patient/participant permissions and institutional authorization. The customer retains its official record, uses minimum aliases/context and obtains written consent when required. Aliases or free access do not anonymize health data. Ley 20.584 requires provider clinical-record retention at least 15 years where applicable. The customer identifies audio/reports belonging to that record and keeps its lawful copy before Nova-copy deletion. The mandate cannot authorize prohibited third-party record access or replace patient/representative permission.
4. Limits, processors and countries
Nova follows lawful documented instructions and enforces access/confidentiality limits. No sale/advertising, model training, unrelated research, cross-customer aggregation, voiceprints or publication is authorized. Ordinary email/billing/auth, game-prompt synthesis and public-cache paths exclude clinical information.
Core hosting is Microsoft Azure East US 2, United States. Azure OpenAI processes minimum context for requested report drafts/planning/assistants and may use other Microsoft regions. Default monitoring may retain flagged content for authorized human review under Microsoft terms, independently of Nova deletion. Azure Speech Fast transcribes/separates speakers and, according to Microsoft, does not retain submitted input/output after processing; Nova keeps its separate copies. The customer specifically authorizes these Microsoft clinical functions only for this lawful mandate. New clinical recipients/purposes need applicable specific authority and safeguards before use.
Supabase adult Auth/generic game assets hold no customer clinical data; Resend/email/Stripe are nonclinical, and Microsoft Azure AI Speech text to speech uses only curated non-identifying game words and prebuilt neural voices; generated clips are publicly cached for playback, without customer clinical data or session recordings. The Subprocessor List explains international infrastructure. Foreign law may permit authority access. Both parties meet transfer assessments/mechanisms and institutional restrictions; a generic checkbox cannot authorize a prohibited transfer.
5. Recording, rights and incidents
Recording is optional. Before each recording/upload, the clinician obtains required minor/representative and other participant permissions, explains purposes, requested transcription/AI, countries/processors, retention and withdrawal, and confirms the session gate. Refusal permits the nonrecording workflow. Identified signed forms stay in the provider's protected record. Capacity/progressive autonomy and valid authority govern; care permission is not publication/research consent.
Nova audio expires after 30 days or earlier lawful deletion. Transcripts/notes/reports have separate retention. Private duplicate-response replies expire after the configured window or at most 24 hours for explicit keys, never enter exports/analytics and are deleted on account erasure. Content-free metadata is purged after 30 days. PG backups have a 14-day rolling cycle; other justified residual copies remain restricted to their purpose/cycle with reason and expiry disclosed.
We provide return/rights assistance within 10 calendar days of verified instructions and destroy remaining active clinical copies within 30 calendar days of return or authorized-destruction instructions, sooner when law requires. This does not extend shorter rights deadlines. Before December 2026, Ley 19.628 article 16 provides a judicial remedy trigger after two business days without a response. We give an initial response or route the request within two business days. Coordinate clinical requests with the provider or hello@slpnova.com without clinical attachments.
We notify without delay and within 24 hours of discovering an actual or suspected incident involving confidentiality, access, use, loss, alteration or material disruption, give available facts and secure updates, contain harm and assist notices. Shorter legal deadlines control. Any retention exception identifies its copy, lawful reason, restrictions and expiry; no indefinite blanket retention is allowed.
6. December 2026 law and acceptance
Ley 21.719 takes general effect on December 1, 2026. Nova/customer comply from that date, including foreign-processor/free-services scope, written mandate/specific authority, security/rights/notices, required impact assessments and routine-transfer mechanisms under articles 27–28. Occasional-transfer permission alone does not justify ongoing foreign hosting. Applicable age/sensitive-data rules govern child authority/consent. Legal transition does not charge, erase records or automatically end a grant.
I can bind the customer identified in this record. I received and accept addendum version 2026-10-launch-chile-v4, complimentary Pro and the limited mandate with its identified Microsoft clinical functions. I will meet patient/representative and institutional permissions before use. I agree to electronic execution and can download the text/evidence. This does not replace patient/representative consent.The record includes parties/addresses/contacts, signatory/title/authority, account/grant, time and exact accepted versions/hashes. Necessary protected evidence remains separate from clinical erasure. Spanish and English have the same parties, purposes, grant values and commitments.